criticalclosedpatched
European Commission & Dutch authorities hit via Ivanti EPMM zero-days
› Ivanti EPMM deployments (EU institutions)
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- Feb 1, 2026
- closed
- Feb 28, 2026
- CVEs
- 1
- sources
- 1
## summary
February 2026: European Commission and Dutch DPA/Judicial Council confirmed breaches through critical Ivanti Endpoint Manager Mobile zero-days. Dutch incident exposed work contact data; Commission said it contained its breach within nine hours.
severity: Critical zero-day espionage / data access
## cve ids[1]
## affected
- Vulnerable EPMM versions prior to Jan/Feb 2026 patches
## fixed in
- Ivanti patched EPMM releases
## news & write-ups[1]
## notes & caveats
Verify primary vendor advisory for exact fixed versions; facts taken from public sources listed in links.
